39. Which of the following is a type of NAC that uses a set of policies to allow or deny access to the network based on the user's identity?
Answer: C
802.1X is a type of NAC that uses policies to control network access based on user identity.
802.1X provides a framework for authenticating users and devices before they gain access to a network, applying specific policies based on their credentials.
A) Standard ACL
Standard Access Control Lists (ACLs) are primarily used to permit or deny traffic based on source IP addresses. They do not consider user identity or utilize policies that are specific to individual users, making them unsuitable for the defined role of Network Access Control (NAC) in this context.
B) MAC filtering
MAC filtering restricts network access based on the MAC addresses of devices. While it provides a level of control, it does not involve user identity verification or the application of policies based on user credentials, thus failing to meet the criteria for NAC as specified in the question.
C) 802.1X
802.1X is a network access control standard that authenticates users and devices before granting them access to the network. It employs a set of policies that evaluate the identity of the user, making it the correct answer according to the question requirements.
D) SSO
Single Sign-On (SSO) allows users to access multiple applications with one set of credentials, but it does not directly regulate network access based on user identity. SSO focuses on authentication for application access rather than controlling network connectivity, thus not fitting the description of NAC in this context.
Conclusion
The correct answer, 802.1X, effectively addresses the need for a NAC that uses user identity to enforce access policies. Unlike the other options, which either lack user-based policies or focus on different aspects of access control, 802.1X directly aligns with the requirement for identity-based network access management.